Question 1

Which of the following should be the FIRST step to establish a cloud assurance program during a cloud migration?

Options :

A : Design

B : Stakeholder identification

C : Development

D : Risk assessment

Answer: C

Question 2

Which of the following is MOST important to manage risk from cloud vendors who might accidentally introduce unnecessary risk to an organization by adding new features to their solutions?

Options :

A : Deploying new features using cloud orchestration tools

B : Performing prior due diligence of the vendor

C : Establishing responsibility in the vendor contract

D : Implementing service level agreements (SLAs) around changes to baseline configurations

Answer: D

Question 3

As a developer building codes into a container in a DevSecOps environment, which of the following is the appropriate place(s) to perform security tests?

Options :

A : Within developer’s laptop

B : Within the CI/CD server

C : Within version repositories

D : Within the CI/CD pipeline

Answer: D

Question 4

What business continuity considerations does a cloud customer need when implementing a cloud-based infrastructure?

Options :

A : Frequent review of cloud backups to ensure business continuity when needed

B : Review of cloud service provider contractual commitments to the main continuity of the provisioned service

C : Conducting of business continuity plan (BCP) and disaster recovery (DR) tests on the cloud service provider

D : Requirement for 100% uptime commitment from the cloud service provider at all times

Answer: B

Question 5

In a situation where duties related to cloud risk management and control are split between an organization and its cloud service providers, which of the following would BEST help to ensure a coordinated approach to risk and control processes?

Options :

A : Establishing a joint security operations center

B : Automating reporting of risk and control compliance

C : Co-locating compliance management specialists

D : Maintaining a centralized risk and controls dashboard

Answer: D

Confidently Practice Online with Free CCAK Exam Cram

Buying Options: